sbx/agentmesh:latest

schemaVersion: "3"
displayName: Agent Mesh node
description: Runs an agentmesh-node inside the sandbox and registers it as an MCP server with the agent.
sourceUrl: https://github.com/google/agentmesh
iconUrl: https://raw.githubusercontent.com/google/agentmesh/70c3bd23ade0aaf00a42213212f3b705f12bb2d8/site/static/favicons/android-192x192.png
version: 0.1.0
licenses:
    - Apache-2.0
kind: mixin
provides:
    - agentmesh
capabilities:
    - type: com.docker.sandbox/network-policy@1
      config:
        runtime:
            allow:
                - ${{ kit.args.controlPlane }}
    - type: com.docker.sandbox/lifecycle@1
      config:
        startup:
            - command: /usr/local/lib/agentmesh/startup.sh
              description: Register the node's MCP with the agent CLIs present, enroll on first boot, run agentmesh-node
              env:
                - AGENTMESH_CONTROL_PLANE
                - AGENTMESH_BOOTSTRAP_TOKEN
                - AGENTMESH_LABELS
              user: "1000"
    - type: com.docker.sandbox/agent-context@1
      config:
        contentFile: /usr/share/sandbox/kit/agentmesh/agentmesh-context.md
args:
    agentmeshVersion:
        default: v0.1.0
        description: ghcr.io/google/agentmesh-node image tag the binary is copied from
        buildArg: AGENTMESH_VERSION
    controlPlane:
        required: true
        description: Control plane host, reached over https (e.g. my-mesh.trycloudflare.com)
        pattern: ^[A-Za-z0-9.-]+$
        env: AGENTMESH_CONTROL_PLANE
    labels:
        default: ""
        description: Node labels as comma-separated key=value pairs, e.g. site=laptop,team=ml
        pattern: ^([A-Za-z0-9_.-]{1,63}=[^,=\s"]{1,255}(,[A-Za-z0-9_.-]{1,63}=[^,=\s"]{1,255})*)?$
        env: AGENTMESH_LABELS
    token:
        required: true
        description: Single-use bootstrap token; pass it with --kit-args-file, never on the command line
        env: AGENTMESH_BOOTSTRAP_TOKEN
dockerfile: agentmesh.dockerfile